Login Request a demo
EI
Product
Entra ID
by Microsoft · last CVE Sep 8, 2026
On CISA KEVExploited in the wild
14
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 10High 4Medium 0Low 0
Severity
All severities14Critical10High4Medium0Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Entra ID to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-69836
In wildKEV
10.0
2%
Aug 20
Microsoft Entra ID Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-42901
10.0
0%
May 22
Microsoft Entra ID Elevation of Privilege Vulnerability
Affected: All versions, or not specified
CVE-2026-35431
10.0
1%
Apr 23
Microsoft Entra ID Entitlement Management Spoofing Vulnerability
Affected: All versions, or not specified
CVE-2025-55241
10.0
2%
Sep 4
Azure Entra ID Elevation of Privilege Vulnerability
Affected: All versions, or not specified
CVE-2026-69851
9.9
1%
Aug 20
Microsoft Entra ID Elevation of Privilege Vulnerability
Affected: All versions, or not specified
CVE-2026-62916
9.8
1%
Sep 3
Microsoft Entra ID Elevation of Privilege Vulnerability
Affected: All versions, or not specified
CVE-2026-33843
9.8
0%
May 22
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
Affected: All versions, or not specified
CVE-2026-24305
9.8
1%
Jan 22
Azure Entra ID Elevation of Privilege Vulnerability
Affected: All versions, or not specified
CVE-2025-59246
9.8
8%
Oct 9
Azure Entra ID Elevation of Privilege Vulnerability
Affected: All versions, or not specified
CVE-2025-59218
9.6
1%
Oct 9
Azure Entra ID Elevation of Privilege Vulnerability
Affected: All versions, or not specified
CVE-2026-83941
8.8
1%
Sep 8
Entra ID Elevation of Privilege Vulnerability
Affected: All versions, or not specified
CVE-2026-62869
8.8
0%
Aug 11
Azure Entra ID Spoofing Vulnerability
Affected: All versions, or not specified
CVE-2026-40379
7.5
1%
May 12
Azure Entra ID Spoofing Vulnerability
Affected: All versions, or not specified
CVE-2024-43477
7.5
1%
Aug 23
Improper access control in Decentralized Identity Services resulted in a vulnerability that allows an unauthenticated attacker to disable Verifiable ID's on another tenant
Affected: All versions, or not specified
Showing 14